This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft File: GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft (raw, json) Hash identifier: At+on+p9ipHleCZAk5pZXycumZMG+NoP5MWnYWmhyVI= Subject key identifier: 24:7D:C2:8A:90:60:EB:1E:14:D7:9C:B6:84:73:A1:8F:07:9C:CF:57 Authority key identifier: 1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C Certificate issuer: /CN=1a12509e4f2a730e169937d40833bb893ee7b98c Certificate serial: 019AF12E3E148F119BC549E6F8AF74ABA252 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:02:10 +0000 Manifest this update: Sat 06 Dec 2025 01:02:10 +0000 Manifest next update: Sun 07 Dec 2025 01:02:10 +0000 Files and hashes: 1: GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl (hash: /DQGdUcE4oc1pSELjmnfzw/FjRfmwNn3QdvHNd12j0M=) 2: qjOZ0ypY-v05Ar9oVOzV-LgMvAA.roa (hash: /cIFZv0Z52Y5+S3hgVxJBf+tIN9m9T+pJ4ZgMnUSMa0=) 3: uVBTeEzfoyB7JY96y5uQlYBoA00.roa (hash: 1QuqtDmpz5L96A5DhcdUsvLbu6XhjJTyVS+t4jv+5BI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:3e:14:8f:11:9b:c5:49:e6:f8:af:74:ab:a2:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a12509e4f2a730e169937d40833bb893ee7b98c Validity Not Before: Dec 6 01:02:10 2025 GMT Not After : Dec 7 01:02:10 2025 GMT Subject: CN=247dc28a9060eb1e14d79cb68473a18f079ccf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1e:0e:a2:e8:5c:f1:7e:3b:4d:72:63:82:4e: 25:0a:a1:80:4d:bb:f7:6c:cd:80:f2:55:a5:9a:6f: 0b:b1:89:57:21:53:30:77:db:0a:18:66:5c:56:63: a4:ad:18:f6:9e:b2:82:28:fa:df:78:e5:98:ed:a8: b7:c4:b3:4c:d0:bb:d2:07:b4:16:13:bc:44:30:32: a5:57:d9:24:cc:fc:96:bc:a0:97:5f:0e:80:26:57: 27:a6:59:c2:bf:c0:26:e5:2a:b3:ec:be:30:fe:4f: f2:be:c1:ad:9a:b2:8c:b1:c0:ab:27:ca:84:08:aa: a2:5d:4b:a2:85:da:94:1e:12:7c:56:4d:a8:81:2b: 73:ea:45:39:ce:16:b8:4e:3a:59:85:be:89:00:91: ce:c5:33:25:e3:76:32:8f:9a:cd:a9:f1:1a:97:11: ae:4a:09:62:a8:56:29:ad:27:ce:98:e1:be:1b:00: 35:45:36:32:45:26:01:65:14:da:9f:5e:ad:88:a0: 48:5f:c5:ac:a9:91:1a:15:47:f9:fb:4f:bc:79:8b: b1:17:42:54:dd:2f:1b:9a:d1:21:9d:cc:f9:9c:40: f3:34:a1:f2:92:35:a3:12:55:f1:3e:eb:d3:3c:cf: 28:4f:6c:95:68:fa:69:d3:0b:7b:ac:47:70:17:e2: c5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7D:C2:8A:90:60:EB:1E:14:D7:9C:B6:84:73:A1:8F:07:9C:CF:57 X509v3 Authority Key Identifier: keyid:1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:0d:d0:89:4d:67:be:f9:08:51:1b:01:ae:2b:01:9e:ed:ea: 82:36:c7:6a:1e:ca:89:3c:3f:16:5b:05:0d:15:8d:a0:5e:aa: 43:15:63:25:e5:e4:14:44:30:c6:1e:36:c7:8a:32:10:e5:d0: 42:d0:c4:b7:4c:94:30:54:bb:38:ca:02:28:7a:4e:05:ba:d5: ee:89:a7:c5:7a:a9:2c:90:c7:3b:4f:0a:59:d8:50:92:12:02: c9:a2:80:4e:82:21:da:04:b8:04:b6:bd:9b:d6:fd:38:0d:c2: 74:c2:72:97:03:b8:24:9f:0b:d5:b8:1c:e7:69:33:d0:ec:fd: de:72:c3:97:55:da:2a:74:aa:2c:ab:31:7f:ef:da:9f:6c:67: 30:cf:06:6e:63:47:f2:65:4f:11:f1:d3:15:d8:44:b4:5b:a9: 15:9b:d9:75:f7:e2:5e:fe:63:a3:2f:23:1f:81:55:e0:40:97: 60:6d:a8:0a:55:34:0e:1a:9b:2d:8a:08:00:a3:a3:35:7d:2b: e7:1c:7e:da:3c:cd:f0:68:6b:63:43:65:0e:64:1c:15:6b:90: ca:ce:81:48:84:c0:df:65:d4:0a:c8:45:59:e8:25:69:e8:1e: 8b:42:a9:1c:33:77:76:d0:73:14:23:15:c4:d1:b8:f2:7b:7c: 9f:48:b5:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLj4UjxGbxUnm+K90q6JSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMTI1MDllNGYyYTczMGUxNjk5MzdkNDA4MzNiYjg5M2Vl N2I5OGMwHhcNMjUxMjA2MDEwMjEwWhcNMjUxMjA3MDEwMjEwWjAzMTEwLwYDVQQD EygyNDdkYzI4YTkwNjBlYjFlMTRkNzljYjY4NDczYTE4ZjA3OWNjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2x4Oouhc8X47TXJjgk4lCqGATbv3 bM2A8lWlmm8LsYlXIVMwd9sKGGZcVmOkrRj2nrKCKPrfeOWY7ai3xLNM0LvSB7QW E7xEMDKlV9kkzPyWvKCXXw6AJlcnplnCv8Am5Sqz7L4w/k/yvsGtmrKMscCrJ8qE CKqiXUuihdqUHhJ8Vk2ogStz6kU5zha4TjpZhb6JAJHOxTMl43Yyj5rNqfEalxGu SgliqFYprSfOmOG+GwA1RTYyRSYBZRTan16tiKBIX8WsqZEaFUf5+0+8eYuxF0JU 3S8bmtEhncz5nEDzNKHykjWjElXxPuvTPM8oT2yVaPpp0wt7rEdwF+LF1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCR9woqQYOseFNectoRzoY8HnM9XMB8GA1UdIwQY MBaAFBoSUJ5PKnMOFpk31Agzu4k+57mMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2hKUW5rOHFjdzRXbVRmVUNETzdpVDdudVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iMzE3MzEtNWNkMy00NDVlLThjYjMt NDE5NmIwZWFjZDI3LzEvR2hKUW5rOHFjdzRXbVRmVUNETzdpVDdudVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iMzE3MzEtNWNkMy00NDVlLThjYjMtNDE5NmIwZWFjZDI3 LzEvR2hKUW5rOHFjdzRXbVRmVUNETzdpVDdudVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcw3QiU1n vvkIURsBrisBnu3qgjbHah7KiTw/FlsFDRWNoF6qQxVjJeXkFEQwxh42x4oyEOXQ QtDEt0yUMFS7OMoCKHpOBbrV7omnxXqpLJDHO08KWdhQkhICyaKAToIh2gS4BLa9 m9b9OA3CdMJylwO4JJ8L1bgc52kz0Oz93nLDl1XaKnSqLKsxf+/an2xnMM8GbmNH 8mVPEfHTFdhEtFupFZvZdffiXv5joy8jH4FV4ECXYG2oClU0DhqbLYoIAKOjNX0r 5xx+2jzN8GhrY0NlDmQcFWuQys6BSITA32XUCshFWeglaegei0KpHDN3dtBzFCMV xNG48nt8n0i1HA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:10:25 2025 by rpki-client